Re: experiences with CRL's Ldap

[Massimiliano Pala]

Mangoentinojo, S (Sebastiaan) wrote:

Hi,

We recently ran into a problem where our Linux based openldap server couldn't handle the CRL requests (webservers failed, that host the "primary" CRL). Our CRL is about 2 MB at the moment and growing a couple of kilobytes every month. Is openldap suitable for serving up CRL's of this size and bigger? Is there anyone doing this succesfully?

There is no problem with CRLs that size, indeed we successfully use OpenLDAP
with CRLs which are 50MB+ in size...

--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]      [EMAIL PROTECTED]
                                                Tel.:   +39 (0)11  564 7081
http://security.polito.it                       Fax:    +39   178  270 2077
                                                Mobile: +39 (0)347 7222 365

Politecnico di Torino (EuroPKI)
Certification Authority Informations:

Authority Access Point                                  http://ca.polito.it
Authority's Certificate:          http://ca.polito.it/ca_cert/en_index.html
Certificate Revocation List:              http://ca.polito.it/crl02/crl.crl
--o------------------------------------------------------------------------

smime.p7s
Description: S/MIME Cryptographic Signature